Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GjTqU03xWd_6B73c2ZBI5XIVnN0.roa
File: GjTqU03xWd_6B73c2ZBI5XIVnN0.roa (raw, json)
Hash identifier: UchRyi4JjPu/U/7Z7cNTf5/BOqj9JzP3hnVJm+12f4E=
Subject key identifier: 1A:34:EA:53:4D:F1:59:DF:FA:07:BD:DC:D9:90:48:E5:72:15:9C:DD
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E7906D8CC53ED103F08FE5097940890
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GjTqU03xWd_6B73c2ZBI5XIVnN0.roa
Signing time: Sun 01 Jan 2023 17:55:03 +0000
ROA not before: Sun 01 Jan 2023 17:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30475
IP address blocks: 193.8.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:06:d8:cc:53:ed:10:3f:08:fe:50:97:94:08:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a34ea534df159dffa07bddcd99048e572159cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:2d:55:0c:3a:7e:13:77:1f:37:14:b6:13:
44:0c:e9:dd:67:1f:af:b0:0d:6a:6c:00:85:85:00:
85:ab:6a:94:ec:72:a2:82:da:03:e0:e6:3f:02:d9:
3e:51:77:6a:5f:ac:e5:cf:2a:8d:43:0a:b3:71:c4:
9f:f5:50:41:c8:d2:21:a8:b1:91:5c:f1:cf:75:53:
db:2c:e8:9d:b4:aa:64:5e:c4:49:4e:b9:a9:5e:97:
ae:74:0c:49:42:d7:25:be:4a:60:9d:fc:d2:c5:46:
59:14:e4:52:f7:7a:1b:a0:e4:76:9c:dc:21:56:4e:
6e:13:80:2f:8a:50:6c:c1:d4:87:5e:c2:8b:46:8b:
59:3c:70:69:af:89:80:69:de:f3:0d:76:f1:22:e4:
7f:d4:b2:76:9b:d1:28:50:31:48:d3:06:f2:44:0a:
f4:a8:e3:3b:c0:b8:7b:03:c9:b9:eb:91:93:21:ba:
ce:fc:cc:b2:71:5c:46:38:a3:46:54:16:19:1d:40:
3f:d3:5f:c6:3f:1b:46:28:17:3c:4b:c5:a8:e7:43:
5a:dd:5f:b8:da:a0:bb:3a:ce:cb:32:b5:34:90:fa:
66:53:85:e9:33:bd:5e:a1:34:19:8b:c8:5c:4a:99:
4d:91:a0:43:e2:d6:e9:82:8c:c1:cc:6a:ee:16:e0:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:EA:53:4D:F1:59:DF:FA:07:BD:DC:D9:90:48:E5:72:15:9C:DD
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/GjTqU03xWd_6B73c2ZBI5XIVnN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b1:55:7e:ab:25:3f:4f:7d:cb:0e:64:3b:c3:82:6a:6d:c2:
d4:82:b9:6b:0e:14:90:98:19:e5:b4:4f:05:d7:fe:a2:41:e4:
e2:c8:5d:7b:de:73:b4:1c:81:5c:39:67:2d:c9:80:ef:01:c8:
e6:ac:6a:cf:a8:a1:14:de:2e:7c:7e:ab:c4:79:23:57:e3:c3:
8d:49:64:98:1f:95:f8:5d:c3:97:a7:4f:5c:f0:58:8c:57:d7:
52:06:17:7f:f3:2b:34:9c:58:8e:5e:2c:8e:2f:92:7f:93:10:
cf:ab:1f:d8:2c:60:cb:a6:d1:7b:2f:01:a3:aa:1e:da:7f:3d:
66:c6:45:61:d7:6a:4e:86:4f:01:91:c6:ab:1c:6c:32:39:5c:
b7:f5:b8:0d:2c:4f:7b:c5:77:01:8a:37:34:48:70:ce:a3:c2:
5a:7f:3a:49:e0:ef:aa:06:af:01:a1:36:c9:13:9e:75:b4:0a:
2c:e3:4f:41:c8:2d:36:0e:fd:fd:83:1c:e9:4d:f4:13:39:75:
29:23:7c:7e:34:b7:79:61:9e:7b:01:77:f6:2e:c9:78:08:b6:
6d:b4:87:35:42:10:5e:f0:ab:a5:1e:f8:93:8f:ca:51:37:d9:
6e:3d:eb:74:1e:07:75:d8:77:64:9e:46:92:3c:92:d6:89:05:
82:4d:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:41 2024 by rpki-client on console-ams.rpki-client.org